pezkuwichain
0b0519bff8
Add codegen step to security workflow and fix prettier formatting
2026-02-13 01:51:37 +03:00
pezkuwichain
62550b442b
Fix subql CLI syntax and remove non-existent validate command
2026-02-13 01:48:50 +03:00
pezkuwichain
15eeb16cd4
Fix subql commands: use correct CLI syntax for codegen and build
2026-02-13 01:46:08 +03:00
pezkuwichain
618cea47c6
Specify manifest file (-f pezkuwi.yaml) in CI workflows
2026-02-13 01:44:24 +03:00
pezkuwichain
4c3920ddae
Fix CI workflows to use Yarn 4 (Berry) with corepack
...
- Add packageManager field to package.json for corepack
- Add .yarnrc.yml with node-modules linker
- Update all workflows to use corepack enable + yarn --immutable
- Remove yarn cache from actions/setup-node (incompatible with Yarn 4)
2026-02-13 01:42:00 +03:00
pezkuwichain
46ca19c22d
Add security and code quality GitHub Actions workflows
...
Security workflow includes:
- CodeQL static analysis for TypeScript vulnerabilities
- npm audit for dependency vulnerabilities (fails on critical)
- Dependency review on PRs (blocks high severity, GPL licenses)
- TruffleHog secret scanning
- Weekly scheduled security scans
Code quality workflow includes:
- ESLint linting checks
- Prettier formatting validation
- TypeScript strict type checking
- Cyclomatic complexity analysis (warns on >15)
- Duplicate code detection with jscpd
2026-02-13 01:37:31 +03:00
pezkuwichain